PT-2026-33839 · Unknown · Openxiangshan Nemu

Published 2026-04-20 · Updated 2026-04-21 · CVE-2026-29646

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenXiangShan NEMU versions prior to 55295c4

Description When running with the RVH (Hypervisor extension) enabled, a VS-mode guest write to the supervisor interrupt-enable CSR sie may be handled incorrectly. This can influence the machine-level interrupt enable state mie, breaking privilege and virtualization isolation. Such a flaw can lead to denial of service or privilege-boundary violation in environments relying on NEMU for correct interrupt virtualization.

Recommendations Update to version 55295c4 or later.

Fix

Weakness Enumeration

CWE-267

Related Identifiers

CVE-2026-29646

Affected Products

Openxiangshan Nemu

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2026-29646 · Security Note
• https://github.com/OpenXiangShan/NEMU/pull/938 · Note
• https://github.com/OpenXiangShan/NEMU/issues/951 · Note
• https://github.com/OpenXiangShan/NEMU/pull/938/commits/55295c46580456d8d5a9d5736e1fda924b8825ab · Note
• https://docs.riscv.org/reference/isa/priv/hypervisor.html · Note
• https://docs.riscv.org/reference/isa/priv/machine.html · Note
• https://docs.riscv.org/reference/isa/unpriv/zicsr.html · Note
• https://twitter.com/infoflowcloud/status/2046603325223665852 · Twitter Post
• https://docs.riscv.org/reference/isa/priv/supervisor.html · Note
• https://twitter.com/CVEnew/status/2046601518296584646 · Twitter Post